SNFR330: NGI shall respond to an Ad Hoc Subject Search request within two minutes after receipt by NGI. 

SNFR331: NGI shall create a security test and evaluation plan. 

SNFR332: NGI shall implement the security test and evaluation plan. 

SNFR333: NGI shall document the results of the security test and evaluation plan which may be used in support of the security certification and 
accreditation process. 

SNFR334: NGI shall respond to 99.9% of RISC Rapid Searches received during any continuous 24-hour period within seventeen seconds after 

receipt by NGI when no additional Identity information is requested. 

STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 

human examiners when it comes to fingerprint comparisons. 

STRQ59: The system shall provide a response without criminal history to an inquiry from a traffic stop within 15 minutes. 

SNFR335: NGI shall respond to 99.9% of RISC Rapid Searches received during any continuous 24-hour period within twenty-seven seconds after 

receipt by NGI when additional Identity information is requested. 

STRQ19: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ59: The system shall provide a response without criminal history to an inquiry from a traffic stop within 15 minutes. 

SNFR336: NGI shall process all Rapid Tenprint Fingerprint Identification transactions to completion. 

SNFR337: NGI shall return the correct candidate a minimum of 98% of the time, when it exists in the searched repository, as a result of a fingerprint 
feature search in support of Rapid Tenprint Fingerprint Identification Searches. 

SNFR338: NGI shall return an incorrect candidate a maximum of 5% of the time, as a result of a fingerprint feature search of the searched repository 
in support of Rapid Tenprint Fingerprint Identification Searches. 

SNFR339: NGI shall respond to a Rapid Tenprint Fingerprint Identification Search within 10 seconds on average, after receipt by NGI, on a daily 
basis. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

SNFR340: NGI shall return an incorrect candidate no more than 0.02% of the time (FMR=0.0002) as a result of a cascaded fingerprint search of the 
ULF. 
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SNFR1: Deleted. 

SNFR2: NGI shall comply with the latest version of the CJIS Security Policy. 

NGI shall comply with the DOJ Order 2640.2E dated November 28, 2003 "Information Security, Network and Computer Connection and 
SNFR3: Connections to Non-Department Entities”. 

BIO.FEAT136: The solution shall adhere to the US-VISIT Privacy Policy, September 14, 2004 

m 

BIO.FEAT200: The solution shall comply with section 222(f) of the Immigration and Nationality Act. 

LEG.NFR1: IAFIS shall comply with all applicable federal and agency guidelines and requirements that relate to the development and operation of 
IAFIS. 

SNFR4: Deleted. 

SNFR5: Deleted. 

SNFR6: Deleted. 

SNFR7: Deleted. 

SNFR8: Deleted. 

SNFR9: Deleted. 

SNFR10: Deleted. 

SNFR11: Deleted. 

SNFR12: Deleted. 

SNFR13: Deleted. 

SNFR14: Deleted. 

SNFR15: Deleted. 

SNFR16: Deleted. 

SNFR17: Deleted. 

SNFR18: Deleted. 

SNFR19: Deleted. 

SNFR20: Deleted. 

SNFR21 : Deleted. 

SNFR22: Deleted. 

SNFR23: Deleted. 

SNFR24: Deleted. 

SNFR25: Deleted. 

SNFR26: Deleted. 

SNFR27: Deleted. 

SNFR28: Deleted. 

SNFR29: Deleted. 

SNFR30: Deleted. 

SNFR31 : Deleted. 

SNFR32: Deleted. 

SNFR33: Deleted. 
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SNFR34: Deleted. 

SNFR35: Deleted. 

SNFR36: Deleted. 

SNFR37: Deleted. 

SNFR38: Deleted. 

SNFR39: Deleted. 

SNFR40: Deleted. 

SNFR41 : Deleted. 

SNFR43: Deleted. 

SNFR44: Deleted. 

SNFR45: Deleted. 

SNFR46: Deleted. 

SNFR47: Deleted. 

SNFR48: Deleted. 

SNFR49: Deleted. 

SNFR50: Deleted. 

SNFR51: Deleted. 

SNFR52: Deleted. 

SNFR53: Deleted. 

SNFR54: Deleted. 

SNFR55: Deleted. 

SNFR56: Deleted. 

SNFR57: Deleted. 

SNFR58: Deleted. 

SNFR59: NGI shall process all fingerprint transactions to completion. 

BIO.FEAT141 : The solution shall provide authorized users real-time access to all information entered or updated in the system based on user 

permissions. 

LEG.NFR44: IAFIS shall process all fingerprint transactions to completion. 

SNFR60: NGI shall process all latent transactions to completion. 

LEG.NFR45: IAFIS shall process all latent transactions to completion; 

STRQ249: IAFIS shall improve latent print accuracy in the terms of reliability (percentage). 

STRQ248: IAFIS shall improve latent print accuracy in the terms of reliability (percentage) and selectivity (number of people). 
SNFR61: NGI shall process all Identity Management transactions to completion. 

BIO.FEAT141 : The solution shall provide authorized users real-time access to all information entered or updated in the system based on user 

permissions. 

SNFR62: NGI shall process all Iris transactions to completion. 

SNFR63: NGI shall process all Rap Back transactions to completion. 

SNFR64: NGI shall process all Repository Management transactions to completion. 

SNFR65: NGI shall process all disposition transactions to completion. 

SNFR66: NGI shall process all photo transactions to completion. 

SNFR67: NGI shall process all palmprint transactions to completion. 
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SNFR68: NGI shall process all supplemental fingerprint and palmprint transactions to completion. 

SNFR69: NGI shall process all RISC transactions to completion. 

SNFR70: NGI shall process all ITF transactions to completion. 

SNFR71: NGI shall return the correct candidate a minimum of TAR=99.00% of the time, when it exists in the searched repository, as a result of a 
fingerprint feature search in support of fingerprint identification services. 

BIO.FEAT18: The solution shall match captured prints to any stored prints within in-scope systems for identification, with a True Acceptance Rate of 
greater than 95 percent for 2-print matching, 98 percent for 10-print matching, and a False Acceptance Rate of less than .1 percent. 

LEG.NFR46: IAFIS shall have a minimum search accuracy of 95 percent, at the fingerprint search stage, in the production environment. 
LEG.NFR116: IAFIS shall have a minimum True Acceptance Rate (TAR) in support of data sharing that is consistent with the minimum fingerprint 
search reliability of 95 percent. 

STRQ654: The latent system shall provide accuracy as to variation from flat latents to rolled. 

SNFR72: NGI shall return an incorrect candidate a maximum of FAR=.0030 of the time, as a result of a fingerprint feature search in support of 

fingerprint identification services. 

BIO.FEAT18: The solution shall match captured prints to any stored prints within in-scope systems for identification, with a True Acceptance Rate of 
greater than 95 percent for 2-print matching, 98 percent for 10-print matching, and a False Acceptance Rate of less than .1 percent. 

LEG.NFR1 17: IAFIS shall have a maximum False Acceptance Rate (FAR) in support of data sharing that is consistent with the IAFIS selectivity no 
greater than 1 on average. 

STRQ654: The latent system shall provide accuracy as to variation from flat latents to rolled. 

SNFR74: NGI shall return the correct candidate a minimum of 98% of the time, when it exists in the RISC repository, as a result of a fingerprint 

feature search in support of RISC Rapid Searches. 

STRQ654: The latent system shall provide accuracy as to variation from flat latents to rolled. 

SNFR75: NGI shall return an incorrect candidate a maximum of 5% of the time, as a result of a fingerprint feature search of the RISC Repository in 
support of RISC Rapid Searches. 

STRQ654: The latent system shall provide accuracy as to variation from flat latents to rolled. 

SNFR76: NGI shall return the correct candidate within the top ten positions a minimum of 75% of the time, when it exists in the searched repository, 

as a result of a feature search in support of latent investigation services. 

LEG.NFR47: IAFIS shall identify the correct latent candidate within the top 1 0 positions of the candidate list at least 65 percent of the time. 
LEG.NFR48: IAFIS shall identify the correct latent candidate in the top-ranked position of the candidate list at least 50 percent of the time. 

LEG.NFR49: IAFIS shall perform Latent Fingerprint searches of a Latent Cognizant Features File containing 100 percent of the subjects in the 
. Criminal Tenprint Fingerprint Features Master File unless the search results will exceed 30 percent of the file. 

LEG.NFR50: IAFIS shall perform Latent Fingerprint searches of a Latent Cognizant Features File containing 100 percent of the subjects in the 
Criminal Tenprint Fingerprint Features Master File when the search results will exceed 30 percent of the file and FBI management approves. 
STRQ29: IAFIS shall allow searches throughout the entire database, and other linked databases, for latents with fewer restrictions on parameters. 
The AFIT database architecture shall be modified to accommodate this. 

STRQ250: IAFIS shall improve latent print accuracy in the terms of selectivity (number of people). 

STRQ248: IAFIS shall improve latent print accuracy in the terms of reliability (percentage) and selectivity (number of people). 

STRQ417: IAFIS shall provide an improved latent print search-and-match accuracy capability. 

STRQ251 : IAFIS shall improve accuracy for latent print accuracy to between 90 and 95 percent. 

STRQ252: IAFIS latent penetration rate shall be increased from 30 percent to 60 percent. 

STRQ376: IAFIS Latent Penetration Rate shall be increased from 30%. 
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STRQ408: IAFIS shall increase the 30% penetration rate for latent submissions. 

STRQ392: IAFIS shall increase the allowed penetration rate for latent searches. 

STRQ979: IAFIS shall increase the allowed penetration rate for latent searches. 

STRQ1047: IAFIS shall increase the latent penetration percentage. 

STRQ543: IAFIS shall provide the capability of searching the entire repository for latent prints searches. 

STRQ580: IAFIS shall allow latent fingerprint against latent fingerprint search capability, for the ETIS enhancement, with no penetration threshold. 

STRQ578: IAFIS shall allow 1 0 print fingerprint to latent fingerprint search capability, and latent fingerprint against latent fingerprint 
search capability, for the ETIS enhancement, with no penetration threshold. 

STRQ581 : IAFIS shall allow latent vs. latent fingerprint search capability with no penetration threshold. 

STRQ684: IAFIS shall provide the option to dynamically change the penetration threshold when searching latent prints. 

STRQ1 105: IAFIS shall allow higher penetration rates for latent palm submissions for major crimes. 

SNFR79: NGI shall provide functional support 24 hours a day, seven days a week. 

LEG.NFR52: IAFIS shall provide functional support 24 hours a day, seven days a week. 

SNFR80: NGI shall provide 99.7% availability, per quarter, in support of all user services except RISC Rapid Search capabilities. 

BIO.FEAT109: The solution shall remain in operation 99% of the time. 

BIO.FEAT141: The solution shall provide authorized users real-time access to all information entered or updated in the system based on user 
permissions. 

LEG.NFR53: IAFIS shall provide 99.0% availability support to all IAFIS User Services. 

STRQ773: IAFIS shall limit all out of service time for scheduled and unscheduled maintenance to not exceed four hours per month in total 
combined. 

SNFR82: NGI shall provide 99.95% availability, per quarter, in support of all International Terrorist Identification Search requests. 

SNFR83: NGI shall provide 99.95% availability, per quarter, in support of all RISC Rapid Search capabilities. 

SNFR84: NGI shall provide the capability to perform back up activities with no impact to NGI User Services. 

LEG.NFR54: IAFIS shall provide the capability to perform back up and maintenance activities with no impact to IAFIS availability. 

SNFR87: NGI shall provide a secure, prioritized, and highly available communications interface for authorized External Systems. 

BIO.FEAT109: The solution shall remain in operation 99% of the time. 

SNFR89: NGI shall support disaster recovery of ail NGI data. 

STRQ938: IAFIS shall have disaster recovery capability 

STRQ802: The IAFIS shall provide disaster recovery capability. 

STRQ91 1 : IAFIS shall have disaster recovery. 

STRQ925: IAFIS shall provide disaster recovery that ensures critical functions are covered. 

STRQ951 : IAFIS shall have disaster recovery capability. 

STRQ1094: IAFIS shall have redundancy for critical infrastructure elements. 

SNFR90: NGI shall support disaster recovery for each of the NGI repositories to support critical user services. 

STRQ938: IAFIS shall have disaster recovery capability 

STRQ802: The IAFIS shall provide disaster recovery capability. 

STRQ91 1 : IAFIS shall have disaster recovery. 

STRQ925: IAFIS shall provide disaster recovery that ensures critical functions are covered. 

STRQ951 : IAFIS shall have disaster recovery capability. 
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SNFR91: NGI shall support secondary repositories that are synchronized copies of the NGI primary repositories. 

SNFR92: NGI shall support secondary repositories that are capable of being geographically separated from the NGI primary repositories. 

SNFR93: NGI shall provide a data replication from the NGI primary repositories to the secondary repositories with no more than a fifteen minute 
delta between primary and secondary repositories. 

SNFR94: NGI shall support fail-over capabilities between the primary and secondary NGI repositories. 

SNFR95: NGI shall provide the capability to concurrently support multiple system environments (i.e., operational, testing, development). 

LEG.NFR56: IAFIS shall provide the capability to concurrently support multiple system environments (i.e., operational, testing, development). 
SNFR96: NGI shall be able to perform system maintenance functions without negatively impacting the ability of NGI to meet availability 
requirements. 

BIO.FEAT71: The solution shall support the routine system maintenance without disrupting normal operations. 

SNFR97: NGI shall support the routine system maintenance without negatively impacting services to an External System (e.g., IDENT). 

BIO.FEAT71 : The solution shall support the routine system maintenance without disrupting normal operations. 

SNFR98: NGI shall provide a test environment that supports the development of new hardware and software and the execution of operational tests 

and evaluations. 

LEG.NFR57: IAFIS shall provide a test environment that supports the development of new hardware and software and the execution of operational 
tests and evaluations. 

SNFR99: NGI shall provide a development system environment that supports the development of new hardware and software and the execution of 
operational tests and evaluations. 

LEG.NFR58: IAFIS shall provide a development system environment that supports the development of new hardware and software and the 
execution of operational tests and evaluations. 

SNFR100: NGI shall support fingerprint diagnostic tools for all environments (i.e., operational, test, development). 

LEG.NFR60: IAFIS shall support fingerprint service diagnostic tools for all environments (i.e., operational, test, development). 

SNFR101: NGI shall support fingerprint accuracy tests without impacting the ability of NGI to meet performance requirements. 

STRQ739: IAFIS shall include the True Exceptance Rate (TAR) when developing measurements to determine accuracy. 

STRQ738: IAFIS shall develop measurements to determine accuracy. This includes the True Acceptance Rate (TAR) and False 
Acceptance Rate (FAR); speed measurements and quality measurements. 

STRQ740: IAFIS shall include the False Acceptance Rate (FAR) when developing measurements to determine accuracy. 

STRQ738: IAFIS shall develop measurements to determine accuracy. This includes the True Acceptance Rate (TAR) and False 
Acceptance Rate (FAR); speed measurements and quality measurements. 

STRQ741 : IAFIS shall include speed when developing measurements to determine accuracy. 

STRQ738: IAFIS shall develop measurements to determine accuracy. This includes the True Acceptance Rate (TAR) and False 
Acceptance Rate (FAR); speed measurements and quality measurements. 

STRQ742: IAFIS shall include quality when developing measurements to determine accuracy. 

STRQ738: IAFIS shall develop measurements to determine accuracy. This includes the True Acceptance Rate (TAR) and False 
Acceptance Rate (FAR); speed measurements and quality measurements. 

STRQ775: IAFIS shall be able to monitor the status of the True Acceptance Rate (TAR) and False Acceptance Rate (FAR) levels to validate that 
thresholds are being met or exceeded. 

SNFR102: NGI shall support fingerprint development and test tools. 

SNFR103: NGI shall support latent diagnostic tools for all environments (i.e., operational, test, development). 

LEG.NFR62: IAFIS shall support latent service diagnostic tools for all environments (i.e., operational, test, development). 
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SNFR104: NGI shall be capable of performing latent accuracy tests without impacting the ability of NGI to meet performance requirements. 
SNFR105: NGI shall support latent development and test tools. 

SNFR106: NGI shall support data management processing diagnostic tools for all environments (i.e., operational, test, development). 

LEG.NFR64: IAFIS shall support document processing diagnostic tools for all environments (i.e., operational, test, development). 

SNFR107: NGI shall support electronic disposition submission development and test tools. 

SNFR108: NGI shall support Photo development and test tools. 

m 

SNFR109: NGI shall support Photo diagnostic tools for all environments (i.e., operational, test, development). 

SNFR110: NGI shall be capable of performing Photo Facial Recognition accuracy tests without impacting performance requirements for other NGI 
services. 


SNFR111: NGI shall support Palmprint diagnostic tools for all environments (i.e., operational, test, development). 


SNFR112: NGI shall support supplemental fingerprint and palmprint diagnostic tools for all environments (i.e., operational, test, development). 


SNFR113: 

SNFR114: 

SNFR115: 

SNFR116: 

SNFR117: 

SNFR118: 

SNFR119: 

SNFR120: 

SNFR121: 

SNFR122: 

SNFR123: 

SNFR124: 

SNFR125: 

SNFR126: 


SNFR127: 

SNFR128: 

SNFR129: 


SNFR130: 


NGI shall be capable of performing Palmprint Search Accuracy tests without impacting performance requirements for other NGI services. 
STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

Deleted. 

NGI shall support Palmprint development and test tools. 

NGI shall support Supplemental Fingerprint and Palmprint development and test tools. 

NGI shall support Iris diagnostic tools for all environments (i.e., operational, test, development). 

NGI shall be capable of performing Iris search accuracy tests without impacting performance requirements for other NGI services. 

NGI shall support Iris development and test tools. 

NGI shall support Rap Back diagnostic tools for all environments (i.e., operational, test, development). 

NGI shall support Rap Back development and test tools. 

NGI shall support repository management diagnostic tools for all environments (i.e., operational, test, development). 

NGI shall support diagnostic tools to test access to external repositories for all environments (i.e., operational, test, development). 

NGI shall support repository management development and test tools. 

NGI shall support a sufficient number of NGI workstations to maintain 24 hours per day, seven days per week operations. 

LEG.NFR51: IAFIS shall support staff organization and 24 hours per day, seven days per week operations. 

NGI shall support all fingerprint functions using an NGI workstation. 

BIO.FEAT126: The solution shall provide the ability for human-confirmed 10 print positive identification. 

BIO.FEAT 1 62: The solution shall provide the capability to show fingerprint image data for fingerprint examiners. 

LEG.NFR59: IAFIS shall support all fingerprint service functions using an IAFIS workstation. 

NGI shall support all ITF functions using an NGI workstation. 

NGI shall support all latent functions using an NGI workstation. 

LEG.NFR61: IAFIS shall support all latent service functions using an IAFIS workstation. 

NGI shall provide the capability for FBI Service Providers to overlay features on images from an NGI latent workstation. 

STRQ428: IAFIS shall be improved so that the actual minutia of the known exemplar are overlaid on the fingerprint, so as to visualize the 
correspondence between each minutia from the latent print and known exemplar. 

NGI shall support all data management processing functions using an NGI workstation. 

LEG.NFR63: IAFIS shall support all document processing functions using an IAFIS workstation. 
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SNFR131: NGI shall be capable of performing the conflict resolution service for disposition transactions on an NGI workstation. 

SNFR132: NGI shall be capable of performing all Photo functions on an NGI workstation. 

SNFR133: NGI shall be capable of performing all Palmprint functions on an NGI workstation. 

SNFR134: NGI shall be capable of performing all supplemental fingerprint and palmprint functions on an NGI workstation. 

SNFR135: NGI shall be capable of performing all Iris functions on an NGI workstation. 

SNFR136: NGI shall be capable of performing all Rap Back functions on an NGI workstation. 

SNFR137: NGI shall be capable of performing all repository management functions on an NGI workstation. 

SNFR138: NGI shall support the capability to replace the fingerprint search algorithms with no impact to NGI User Services. 

SNFR139: NGI shall support the capability to replace the facial recognition search algorithms with no impact to NGI User Services. 

SNFR140: NGI shall support the capability to replace the palmprint search algorithms with no impact to NGI User Services. 

SNFR141: NGI shall support the capability to replace the supplemental fingerprint and palmprint search algorithms with no impact to NGI User 

Services. 

SNFR142: NGI shall support the capability to replace the iris search algorithms with no impact to NGI User Services. 

SNFR143: NGI shall support enrollment rule management tools. 

SNFR144: NGI shall support dissemination rule management tools. 

SNFR145: NGI shall capable of performing inter-repository Identity consolidation searches without impacting performance requirements for other 

NGI services. 

♦ 

SNFR146: NGI shall be capable of performing intra-repository Identity consolidation searches without impacting performance requirements for 
other NGI services. 

SNFR147: NGI shall provide a scalable repository. 

STRQ906: IAFIS shall provide a multimodal framework that will easily support current information sources with future considerations such as iris, 

palm, flats, and other biometrics to run against templates for scoring and weighting. 

STRQ905: IAFIS shall provide a multimodal framework that will easily support current information sources with future considerations 

such as iris, palm, flats, and other biometrics to run against templates for scoring, weighting, with a possibility of fusion of multiple 

biometric analysis. 

STRQ922: IAFIS shall provide a scalable, multimodal framework that provides "plug and play" for new biometrics and technologies. 

STRQ920: IAFIS shall provide a scalable, multimodal framework that provides "plug and play" for new biometrics and technologies. 

SNFR148: NGI shall provide an extensible repository. 

STRQ906: IAFIS shall provide a multimodal framework that will easily support current information sources with future considerations such as iris, 
palm, flats, and other biometrics to run against templates for scoring and weighting. 

STRQ905: IAFIS shall provide a multimodal framework that will easily support current information sources with future considerations 
such as iris, palm, flats, and other biometrics to run against templates for scoring, weighting, with a possibility of fusion of multiple 
biometric analysis. 

STRQ922: IAFIS shall provide a scalable, multimodal framework that provides "plug and play" for new biometrics and technologies. 

STRQ920: IAFIS shall provide a scalable, multimodal framework that provides "plug and play" for new biometrics and technologies. 
SNFR149: NGI shall respond to a high priority criminal Fingerprint Identification Search within ten minutes after receipt by NGI. 

LEG.NFR65: IAFIS shall respond to a criminal fingerprint identification search within 2 hours after initiation of search on IAFIS. 

STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ135: IAFIS shall provide 8-13 minute turnaround on latent file using 2-4 finger searches. 
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STRQ1 34: IAFIS shall provide 8-1 3 minute turnaround on latent file using 2-4 finger and 1 0-print searches. 

STRQ136: IAFIS shall provide 8-13 minute turnaround on latent file using 10-print searches. 

STRQ1 34: IAFIS shall provide 8-1 3 minute turnaround on latent file using 2-4 finger and 1 0-print searches. 

STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

STRQ736: IAFIS shall have a prioritization process for when time requirements are necessary. 

STRQ976: IAFIS response time shall be less than 2 hours for criminal ten-print submissions. 

SNFR150: NGI shall respond to a routine priority criminal Fingerprint Identification Search within 30 minutes after receipt by NGI. 

LEG.NFR65: IAFIS shall respond to a criminal fingerprint identification search within 2 hours after initiation of search on IAFIS. 

STRQ19: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

ST RQ1 35: IAFIS shall provide 8-1 3 minute turnaround on latent file using 2-4 finger searches. 

STRQ1 34: IAFIS shall provide 8-1 3 minute turnaround on latent file using 2-4 finger and 1 0-print searches. 

STRQ136: IAFIS shall provide 8-13 minute turnaround on latent file using 10-print searches. 

STRQ1 34: IAFIS shall provide 8-1 3 minute turnaround on latent file using 2-4 finger and 1 0-print searches. 

STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

STRQ736: IAFIS shall have a prioritization process for when time requirements are necessary. 

STRQ976: IAFIS response time shall be less than 2 hours for criminal ten-print submissions. 

SNFR151: NGI shall respond to a low priority criminal Fingerprint Identification Search within 24 hours after receipt by NGI. 

LEG.NFR65: IAFIS shall respond to a criminal fingerprint identification search within 2 hours after initiation of search on IAFIS. 

STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

STRQ736: IAFIS shall have a prioritization process for when time requirements are necessary. 

SNFR152: NGI shall respond to a non-urgent criminal Fingerprint Identification Search within 15 days after receipt by NGI. 

LEG.NFR65: IAFIS shall respond to a criminal fingerprint identification search within 2 hours after initiation of search on IAFIS. 

STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

STRQ736: IAFIS shall have a prioritization process for when time requirements are necessary. 

STRQ954: IAFIS shall have multiple levels of priority for civil submissions. 

SNFR153: NGI shall respond to a high priority civil Fingerprint Identification Search within 15 minutes after receipt by NGI. 

BIO.FEAT172: The solution shall perform a high priority response time search within 15 minutes to determine if an individual is on the watchlist or 
within the IAFIS Criminal Master File. 

BIO.FEAT251 : The solution shall establish and verify an individual's identity to provide a background check within 1 5 minutes to 24 hours (low, 


medium, or high priority) to international, federal, state, and local criminal justice and non-criminal justice agencies and immigration and border 


management personnel (CBP, Border Patrol). 

BIO.FEAT252: The solution shall determine eligibility, benefits, positions, or privileges to provide a background check within 15 minutes to 24 hours 
(low, medium, or high priority) to international, federal, state, and local criminal justice and non-criminal justice agencies processing 
employment/licensing applications and DOS consular officials involved with the visa application/interview process. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 


T. 
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LEG.NFR66: IAFIS shall respond to a civil fingerprint identification search within 24 hours after initiation of search on IAFIS. 

STRQ19: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ296: IAFIS shall have the ability to set a higher priority on civil submissions during times of national security alerts. 

STRQ220: IAFIS shall allow an option for an emergency civil fingerprint search with a response time of not greater than 1 5 minutes 
STRQ295: IAFIS shall have the ability to set a higher priority on civil submissions during times of national security alerts or other unique 

situations (such as hurricanes). 

STRQ395: IAFIS shall provide responses to civil ten-print submissions within 4 hours. 

STRQ566: IAFIS shall return civil responses within four hours 

STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

STRQ736: IAFIS shall have a prioritization process for when time requirements are necessary. 

STRQ954: IAFIS shall have multiple levels of priority for civil submissions. 

■ STRQ968: The IAFIS shall return the results of a civil fingerprint check in under 6 hours. 

SNFR154: NGI shall respond to a routine priority civil Fingerprint Identification Search within two hours after receipt by NGI. 

BIO.FEAT173: The solution shall perform a medium priority response time search within 2 hours to determine if an individual is on the watchlist, has 
any criminal history, or has any civil background information. 

BIO.FEAT251 : The solution shall establish and verify an individual's identity to provide a background check within 15 minutes to 24 hours (low, 
medium, or high priority) to international, federal, state, and local criminal justice and non-criminal justice agencies and immigration and border 
management personnel (CBP, Border Patrol). 

BIO.FEAT252: The solution shall determine eligibility, benefits, positions, or privileges to provide a background check within 15 minutes to 24 hours 
(low, medium, or high priority) to international, federal, state, and local criminal justice and non-criminal justice agencies processing 
employment/licensing applications and DOS consular officials involved with the visa application/interview process. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

LEG.NFR66: IAFIS shall respond to a civil fingerprint identification search within 24 hours after initiation of search on IAFIS. 

STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ395: IAFIS shall provide responses to civil ten-print submissions within 4 hours. 

STRQ566: IAFIS shall return civil responses within four hours 

STRQ625: IAFIS shall decrease the response time for civil ten-print submissions within 2 hours. 

STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

STRQ736: IAFIS shall have a prioritization process for when time requirements are necessary. 

STRQ954: IAFIS shall have multiple levels of priority for civil submissions. 

STRQ968: The IAFIS shall return the results of a civil fingerprint check in under 6 hours. 

SNFR155: NGI shall respond to a low priority civil Fingerprint Identification Search within 24 hours after receipt by NGI. 

BIO.FEAT174: The solution shall perform a low priority response time search within 24 hours to determine if an individual is on the watchlist, has any 
criminal history, or has any civil background information. 

BIO.FEAT251 : The solution shall establish and verify an individual's identity to provide a background check within 15 minutes to 24 hours (low, 
medium, or high priority) to international, federal, state, and local criminal justice and non-criminal justice agencies and immigration and border 
management personnel (CBP, Border Patrol). 
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BIO.FEAT252: The solution shall determine eligibility, benefits, positions, or privileges to provide a background check within 15 minutes to 24 hours 
(low, medium, or high priority) to international, federal, state, and local criminal justice and non-criminal justice agencies processing 
employment/licensing applications and DOS consular officials involved with the visa application/interview process. 

BIO.FEAT253: The solution shall build a criminal history within 24 hours (low priority) to international, federal, and state agencies to acquire both 
current and non-current arrest information supported by fingerprints to add to IAFIS. 

BIO.FEAT254: The solution shall provide travel and immigration history of individuals within 24 hours (low priority) to international, federal, state, and 
local criminal justice and non-criminal justice agencies and immigration and border management personnel to assist in determining legal status and 
provide intelligence information. 

BIO.FEAT255: The solution shall return information to support investigative cases relating to prosecution or other potential adverse actions within 24 
hours (low priority) to international, federal, state, and local law enforcement agencies. 

BIO.FEAT256: The solution shall analyze trends and intelligence related to travel, immigration, criminal, and non-criminal activity within 24 hours 
(low priority) to international, federal, state, and local law enforcement and intelligence agencies. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

LEG.NFR66: IAFIS shall respond to a civil fingerprint identification search within 24 hours after initiation of search on IAFIS. 

STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

STRQ736: IAFIS shall have a prioritization process for when time requirements are necessary. 

STRQ954: IAFIS shall have multiple levels of priority for civil submissions. 

SNFR156: NGI shall respond to a non-urgent civil Fingerprint Identification Search within 15 days after receipt by NGI. 

LEG.NFR66: IAFIS shall respond to a civil fingerprint identification search within 24 hours after initiation of search on IAFIS. 

STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ732: IAFIS shall support palm processing without any degradation in processing times established in ten-print processing. 

STRQ736: IAFIS shall have a prioritization process for when time requirements are necessary. 

STRQ954: IAFIS shall have multiple levels of priority for civil submissions. 

SNFR157: NGI shall respond to 99% of RISC Rapid Searches received during any continuous 24-hour period within within ten seconds after receipt 
by NGI when no additional Identity information is requested. 

BIO.FEAT 1 71 : The solution shall perform an immediate priority response time search within 1 0 seconds for initial risk assessment to determine if an 
individual is on the watchlist, is wanted, is a known or suspected terrorist, or is in the Sex Offender Registry. 

BIO.FEAT250: The solution shall provide an immediate identification of high-risk individuals within 10 seconds (immediate priority) to international, 
federal, state, and local law enforcement and immigration and border management personnel. 

STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ59: The system shall provide a response without criminal history to an inquiry from a traffic stop within 15 minutes. 

SNFR158: NGI shall respond to RISC Maintenance requests within 15 minutes after receipt by NGI. 

SNFR159: NGI shall respond to an International Terrorist identification Search within 15 minutes after receipt by NGI. 

SNFR160: NGI shall respond to an International Terrorist File Maintenance request within 15 minutes after receipt by NGI. 

SNFR161: NGI shall respond to a Fingerprint Verification request within 15 minutes after receipt by NGI. 


NGI-DOC-01 175-4.0, May 10, 2007 


Pa ?9dP 


STRQ1 9: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ954: IAFIS shall have multiple levels of priority for civil submissions. 

SNFR162: NGI shall respond to a Fingerprint Image Retrieval request for a single UCN within five minutes after receipt by NGI. 

LEG.NFR67: IAFIS shall transmit fingerprint image request responses for known subjects (i.e., subjects specified by FBI Numbers or SIDs) to 

authorized requesters within one hour from the IAFIS time of receipt of the request. 

SNFR163: NGI shall respond to a Fingerprint Image Retrieval request for up to 1000 UCNs within 48 hours after receipt by NGI. 

LEG.NFR68: IAFIS shall respond to a fingerprint image retrieval of up to 100 known subjects within 24 hours after initiation of request to IAFIS. 
SNFR164: NGI shall respond to a Fingerprint Audit Trail Retrieval request within 15 minutes after receipt by NGI. 

SNFR165: NGI shall complete a cascaded fingerprint search within 24 hours of NGI completing the original request on average. 

BIO.FEAT187: The solution shall provide all modifications to shared biometric information between in-scope systems within 15 minutes. 
SNFR166: NGI shall respond to a high priority Latent Search within a one hour average measured over a 24 hour period after receipt by NGI. 

LEG.NFR69: IAFIS shall respond to a latent search within 24 hours after initiation of search on IAFIS. 

STRQ29: IAFIS shall allow searches throughout the entire database, and other linked databases, for latents with fewer restrictions on parameters. 
The AFIT database architecture shall be modified to accommodate this. 

STRQ78: The IAFIS target response time for latent search submissions shall be no more than 2 hours for a priority 2 at the highest acceptable 
penetration. 

STRQ252: IAFIS latent penetration rate shall be increased from 30 percent to 60 percent. 

STRQ253: IAFIS shall have a prioritization scheme to address issues of national security or crises for latent fingerprint submissions. 

STRQ254: IAFIS shall provide a one hour response time for latent searches. 


STRQ266: IAFIS shall provide the capability to specify separate, and distinct, search priorities for latent print searches in a single submission (for 
each file being searched). 

STRQ392: IAFIS shall increase the allowed penetration rate for latent searches. 

STRQ979: IAFIS shall increase the allowed penetration rate for latent searches. 

STRQ1 047: IAFIS shall increase the latent penetration percentage. 

STRQ543: IAFIS shall provide the capability of searching the entire repository for latent prints searches. 


STRQ580: IAFIS shall allow latent fingerprint against latent fingerprint search capability, for the ETIS enhancement, with no penetration threshold. 

STRQ578: IAFIS shall allow 10 print fingerprint to latent fingerprint search capability, and latent fingerprint against latent fingerprint 
search capability, for the ETIS enhancement, with no penetration threshold. 

STRQ581 : IAFIS shall allow latent vs. latent fingerprint search capability with no penetration threshold. 

STRQ684: IAFIS shall provide the option to dynamically change the penetration threshold when searching latent prints. 

STRQ1 105: IAFIS shall allow higher penetration rates for latent palm submissions for major crimes. 

SNFR167: NGI shall respond to a routine priority Latent Search within four hours after receipt by NGI. 

LEG.NFR69: IAFIS shall respond to a latent search within 24 hours after initiation of search on IAFIS. 

STRQ29: IAFIS shall allow searches throughout the entire database, and other linked databases, for latents with fewer restrictions on parameters. 
The AFIT database architecture shall be modified to accommodate this. 

STRQ78: The IAFIS target response time for latent search submissions shall be no more than 2 hours for a priority 2 at the highest acceptable 
penetration. 

STRQ252: IAFIS latent penetration rate shall be increased from 30 percent to 60 percent. 
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STRQ253: IAFIS shall have a prioritization scheme to address issues of national security or crises for latent fingerprint submissions. 

STRQ266: IAFIS shall provide the capability to specify separate, and distinct, search priorities for latent print searches in a single submission (for 
each file being searched). 

STRQ392: IAFIS shall increase the allowed penetration rate for latent searches. 

STRQ979: IAFIS shall increase the allowed penetration rate for latent searches. 

STRQ1047: IAFIS shall increase the latent penetration percentage. 

STRQ543: IAFIS shall provide the capability of searching the entire repository for latent prints searches. 


STRQ580: IAFIS shall allow latent fingerprint against latent fingerprint search capability, for the ETIS enhancement, with no penetration threshold. 

STRQ578: IAFIS shall allow 1 0 print fingerprint to latent fingerprint search capability, and latent fingerprint against latent fingerprint 
search capability, for the ETIS enhancement, with no penetration threshold. 

STRQ581 : IAFIS shall allow latent vs. latent fingerprint search capability with no penetration threshold. 

STRQ684: IAFIS shall provide the option to dynamically change the penetration threshold when searching latent prints. 

STRQ1 105: IAFIS shall allow higher penetration rates for latent palm submissions for major crimes. 

SNFR168: NGI shall respond to a low priority Latent Search within 24 hours after receipt by NGI. 

BIO.FEAT254: The solution shall provide travel and immigration history of individuals within 24 hours (low priority) to international, federal, state, and 
local criminal justice and non-criminal justice agencies and immigration and border management personnel to assist in determining legal status and 
provide intelligence information. 

BIO.FEAT255: The solution shall return information to support investigative cases relating to prosecution or other potential adverse actions within 24 
hours (low priority) to international, federal, state, and local law enforcement agencies. 

BIO.FEAT256: The solution shall analyze trends and intelligence related to travel, immigration, criminal, and non-criminal activity within 24 hours 
(low priority) to international, federal, state, and local law enforcement and intelligence agencies. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

LEG.NFR69: IAFIS shall respond to a latent search within 24 hours after initiation of search on IAFIS. 

STRQ29: IAFIS shall allow searches throughout the entire database, and other linked databases, for latents with fewer restrictions on parameters. 
The AFIT database architecture shall be modified to accommodate this. 

STRQ252: IAFIS latent penetration rate shall be increased from 30 percent to 60 percent. 

STRQ253: IAFIS shall have a prioritization scheme to address issues of national security or crises for latent fingerprint submissions. 

STRQ266: IAFIS shall provide the capability to specify separate, and distinct, search priorities for latent print searches in a single submission (for 
each file being searched). 

STRQ392: IAFIS shall increase the allowed penetration rate for latent searches. 

STRQ979: IAFIS shall increase the allowed penetration rate for latent searches. 

STRQ1047: IAFIS shall increase the latent penetration percentage. 

STRQ543: IAFIS shall provide the capability of searching the entire repository for latent prints searches. 


STRQ580: IAFIS shall allow latent fingerprint against latent fingerprint search capability, for the ETIS enhancement, with no penetration threshold. 

STRQ578: IAFIS shall allow 1 0 print fingerprint to latent fingerprint search capability, and latent fingerprint against latent fingerprint 
search capability, for the ETIS enhancement, with no penetration threshold. 

STRQ581 : IAFIS shall allow latent vs. latent fingerprint search capability with no penetration threshold. 

STRQ684: IAFIS shall provide the option to dynamically change the penetration threshold when searching latent prints. 
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STRQ1 1 05: IAFIS shall allow higher penetration rates for latent palm submissions for major crimes. 

SNFR169: NGI shall respond to a Latent Audit Trail Retrieval request within 15 minutes after receipt by NGI. 

SNFR170: NGI shall send an External Latent Print Search request to an External System (e.g., IDENT) within 15 minutes of NGI receiving the request. 
SNFR171: NGI shall respond to a III Subject Search request within one second after receipt by NGI. 

LEG.NFR70: IAFIS shall respond to a direct III Criminal Subject Search Request within 3.7 seconds after initiation of search on IAFIS. 

SNFR172: NGI shall respond to a III Identity History request within one second after receipt by NGI. 

SNFR173: NGI shall send an Identification Search request to Authorized External Systems (e.g., IDENT) for all newly enrolled Identities within 15 
minutes following the NGI enrollment. 

SNFR174: NGI shall respond to a Facial Recognition Search request within two hours after receipt by NGI. 

SNFR175: NGI shall respond to a Text-Based Facial Photo Search request within 15 minutes after receipt by NGI. 

SNFR176: NGI shall respond to a Text-Based SMT Photo Search request within 15 minutes after receipt by NGI. 

SNFR177: NGI shall respond to a Photo Image Retrieval request for a single UCN within five minutes after receipt by NGI. 

LEG.NFR72: IAFIS shall respond to a criminal photo request that contains an FNU within 24 hours after the initiation of the response from IAFIS if 
the photo is located in the IAFIS repository. 

SNFR178: NGI shall respond to a Photo Features Retrieval request for a single UCN within five minutes after receipt by NGI. 

SNFR180: NGI shall respond to a Photo Audit Trail Retrieval request within 15 minutes after receipt by NGI. 

SNFR181: NGI shall perform a Photo Maintenance request within 15 minutes after receipt by NGI. 

LEG.NFR73: IAFIS shall perform file maintenance on criminal photos, when appropriate, within ten minutes after the initiation of the photo 
maintenance request. 

SNFR182: Deleted. 

SNFR183: NGI shall respond to a Palmprint Image Retrieval request for a single UCN within five minutes after receipt by NGI. 

SNFR184: NGI shall respond to a Palmprint Feature Retrieval request for a single UCN within five minutes after receipt by NGI. 

SNFR186: NGI shall respond to a Palmprint Audit Trail Retrieval request within 15 minutes after receipt by NGI. 

SNFR188: NGI shall perform a Palmprint Maintenance request within 15 minutes after receipt by NGI. 

SNFR189: NGI shall perform Supplemental Fingerprint and Palmprint Maintenance for a single UCN request within 15 minutes after receipt by NGI. 
SNFR190: NGI shall perform a Direct Rap Back Enrollment within 15 minutes after receipt by NGI. 

SNFR191: NGI shall respond to an Iris Search request within two hours after receipt by NGI. 

SNFR192: NGI shall respond to an Iris Image Retrieval request for a single UCN within five minutes after receipt by NGI. 

SNFR193: NGI shall respond to an Iris Features Retrieval request for a single UCN within five minutes after receipt by NGI. 

SNFR194: NGI shall respond to an Iris Audit Trail Retrieval request within 15 minutes after receipt by NGI. 

SNFR195: NGI shall perform an Iris Maintenance request within 15 minutes after receipt by NGI. 

SNFR196: NGI shall respond to Rap Back Subscription List Retrieval within 15 minutes after receipt by NGI. 

SNFR197: NGI shall perform Rap Back Maintenance requests for a single UCN within 15 minutes after receipt by NGI. 

SNFR199: NGI shall respond to a Disposition Fingerprint Search within 24 hours after the receipt by NGI. 

SNFR200: NGI shall respond to a NCIC Disposition Submission request within five seconds after the receipt by NGI. 

LEG.FR671 : IAFIS shall respond to a Disposition Submission from an Authorized Contributor request within 24 hours after the request is received. 

SNFR201: NGI shall respond to an NCIC Disposition Maintenance request within five seconds after the receipt by NGI. 
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SNFR202: NGI shall complete all Link Maintenance requests received from an Authorized External System within 15 minutes of NGI receiving the 
maintenance request. 

BIO.FEAT70: The solution shall provide all updates to shared biographic information between in-scope systems within 15 minutes. 

BIO.FEAT72: Upon record removal by the owning agency, the solution shall remove that data from in-scope systems within 1 5 minutes upon receipt 
of removal request. 

BIO.FEAT274: Upon data removal by the owning agency for records retention policy purposes, the solution shall remove that data from in-scope 
systems within 24 hours. 

BIO.FEAT275: When CJIS executes a removal for an individual, US-VISIT shall unlink the FBI criminal history and all references to that criminal 

It 

history from any DHS encounters for that individual. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

SNFR203: NGI shall provide all Notifications within five minutes after completion of the triggering event. 

BIO.FEAT70: The solution shall provide all updates to shared biographic information between in-scope systems within 15 minutes. 

SNFR205: NGI shall be capable of meeting the estimated yearly fingerprint workloads contained in Table 4-1 a. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

LEG.NFR74: IAFIS shall provide the capability to meet all workload projections as described in the IAFIS System Requirements Document. 
LEG.NFR75: IAFIS shall be capable of meeting the average daily submission volume for Tenprint processing as specified in the third row of Table 4- 
1 A and the first row of Table 4-1 B. 

LEG.NFR76: IAFIS shall be capable of meeting the average daily volumes of Tenprint submissions requiring features-based processing as specified 
in the fifth row of Table 4-1 A and the third row of Table 4-1 B. 

LEG.NFR87: IAFIS shall be capable of meeting the average daily workload of submissions and requests as specified in Table 4-7. 

LEG.NFR89: IAFIS shall be capable of meeting the average daily workload of Fingerprint Image Requests as specified in Table 4-7. 

STRQ271: IAFIS shall increase the latent file cap to an initial size of 1 million images. 

STRQ744: IAFIS shall determine valid projections of work load with an ability to scale up or surge as contingencies arise. 

STRQ772: IAFIS shall have database scalability to deal with contingency surges of up to 400,000 searches per day. 

STRQ787: IAFIS shall maintain a spare capacity so IAFIS can search 5% of the database against itself every 20 months - automated consolidated 
run (i.e. a 100% over 20 month timeframe). 

STRQ804: The IAFIS system shall be scalable. 

STRQ898: IAFIS shall be scalable to increase the base search of 200,000 records. 

STRQ1 080: IAFIS shall be able to support increased peak rates. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1081: IAFIS shall be able to support increased daily workloads. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1083: IAFIS shall have sufficient capacity to handle high volume, high priority short term events. 

SNFR206: NGI shall be capable of meeting the projected yearly storage capacity for fingerprint processing as specified in Table 4-2. 

LEG.NFR77: IAFIS shall be capable of storing data in the Subject Criminal History File, the Criminal Tenprint Fingerprint Image Master File, and the 
Criminal Tenprint Fingerprint Features Master File for the number of records as specified in row 2 of Table 4-2. 

LEG.NFR78: IAFIS shall be capable of storing data in the Civil Subject Index Master File and the Civil Tenprint On-Line File for the number of 
records as specified in row 2 of Table 4-3. 

LEG.NFR79: IAFIS shall be capable of storing data in the Civil Tenprint Fingerprint Features File shall for the number of records as specified in row 
2 of Table 4-3. 
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STRQ1 082: IAFIS shall have sufficient capacity to handle backlogs from unscheduled downtime or maintenance downtime. 

SNFR207: NGI shall be capable of meeting the estimated Yearly Latent workloads contained in Table 4-3a. 

LEG.NFR80: IAFIS Latent Fingerprint processing shall be capable of meeting the average daily submission volumes as specified in the first, second 
and third row of Table 4-4A. 

LEG.NFR81 : IAFIS shall be capable of meeting the average daily Latent Fingerprint submission and search volumes for Latent Fingerprint 
submissions as specified in the last row of Table 4-4A. 

STRQ271 : IAFIS shall increase the latent file cap to an initial size of 1 million images. 

STRQ744: IAFIS shall determine valid projections of work load with an ability to scale up or surge as contingencies arise. 

STRQ772: IAFIS shall have database' scalability to deal with contingency surges of up to 400,000 searches per day. 

STRQ787: IAFIS shall maintain a spare capacity so IAFIS can search 5% of the database against itself every 20 months - automated consolidated 
run (i.e. a 100% over 20 month timeframe). 

STRQ804: The IAFIS system shall be scalable. 

STRQ898: IAFIS shall be scalable to increase the base search of 200,000 records. 

STRQ1080: IAFIS shall be able to support increased peak rates. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1081: IAFIS shall be able to support increased daily workloads. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1083: IAFIS shall have sufficient capacity to handle high volume, high priority short term events. 

SNFR208: NGI shall be capable of meeting the projected yearly unsolved latent capacity as specified in Table 4-4a. 

LEG.NFR83: IAFIS shall provide the capacity to store fingerprint data in the Unsolved Latent Fingerprint Image File and the Unsolved Latent 

Fingerprint Features File for the number of subjects as specified in rows 5 and 6 of Table 4-2. 

SNFR209: NGI shall support a maximum ULF capacity of 1 million images. 

STRQ271 : IAFIS shall increase the latent file cap to an initial size of 1 million images. 

SNFR210: NGI shall support a maximum SPC File capacity of 3 million images. 

LEG.NFR96: IAFIS shall support a maximum Special Latent Cognizant File capacity of 1.5 million images. 

SNFR211: NGI shall be capable of meeting the estimated yearly disposition workloads contained in Table 4-5a. 

SNFR212: NGI shall be capable of meeting the estimated annual disposition data capacities contained in Table 4-6. 

SNFR213: NGI shall be capable of meeting the estimated annual deferred disposition submission data capacities contained in Table 4-6. 

SNFR214: NGI shall be capable of meeting the. estimated yearly photo workloads contained in Table 4-7a. 

LEG.NFR88: IAFIS shall be capable of meeting the average daily workload of photo image requests and submissions as specified in Table 4-7. 
SNFR215: NGI shall be capable of meeting the estimated yearly photo capacities contained in Table 4-8. 

SNFR216: NGI shall be capable of meeting the estimated yearly palmprint workloads contained in Table 4-9a. 

SNFR217: NGI shall be capable of meeting the estimated yearly supplemental fingerprint and palmprint workloads contained in Table 4-11a. 
SNFR218: NGI shall be capable of meeting the estimated yearly palmprint capacities contained in Table 4-10. 

SNFR219: NGI shall be capable of meeting the estimated yearly Supplemental Fingerprint and Palmprint capacities contained in Table 4-12. 
SNFR220: NGI shall be capable of meeting the estimated yearly iris workloads contained in Table 4-13a. 

SNFR221: NGI shall be capable of meeting the estimated yearly iris capacities contained in Table 4-14. 

SNFR222: NGI shall be capable of meeting the average daily submission volume of expungements and miscellaneous transactions, as specified in 
Table 4-1 5. 
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LEG.NFR86: IAFIS shall be capable of meeting the average daily submission volume of dispositions, expungements, and miscellaneous 
transactions, as specified in Table 4-6. 

SNFR223: NGI shall be capable of meeting the estimated yearly Identity capacities contained in Table 4-16. 

SNFR224: NGI shall be capable of meeting the estimated yearly Rap Back workloads contained in Table 4-17a. 

SNFR225: NGI shall be capable of meeting the estimated yearly Rap Back capacities contained in Table 4-18. 

SNFR226: NGI shall be capable of processing an average daily volume of 200 Ad Hoc Subject Search inquiries against the Identity History File. 

LEG.NFR90: IAFIS shall be capable of handling an average daily volume of 100 ad hoc Subject Search inquiries against the Subject Criminal 
History File. 

LEG.NFR91: IAFIS shall be capable of handling an average daily volume of 100 ad hoc Subject Search inquiries against the 50 for Civil Subject 
Index Master File. 

SNFR227: NGI shall be capable of meeting the estimated average daily volume of Identity history requests and searches as specified in Table 4-19. 

LEG.NFR85: IAFIS shall be capable of processing the average daily volume of criminal identification requests and searches as specified in row 7 of 
Table 4-5, and of meeting the average daily volume of criminal history requests as specified in row 8 of Table 4-5. 

SNFR229: NGI shall correctly verify the candidate at TAR=99.99% for a two finger comparison. 

BIO.FEAT178: The solution shall match captured prints to stored prints of the same individual for verification, with a True Accept Rate of greater 
than 99 percent and a False Accept Rate of less than .1 percent. 

STRQ654: The latent system shall provide accuracy as to variation from flat latents to rolled. 

SNFR230: NGI shall provide the incorrect candidate to Ill/Verify a maximum of FAR=0.2000. 

STRQ654: The latent system shall provide accuracy as to variation from flat latents to rolled. 

SNFR231 : NGI shall return the correct candidate a minimum of 99% of the time, when it exists in the searched repository, as a result of a fingerprint 

feature search in support of fingerprint investigation services. 

SNFR232: NGI shall return an incorrect candidate a maximum of 2% of the time, as a result of a fingerprint feature search in support of fingerprint 

investigation services. 

SNFR233: Deleted. 

SNFR234: Deleted. 

SNFR235: NGI shall return the correct candidate a minimum of 85% of the time, when it exists in the searched repository, as a result of a facial 
recognition search in support of photo investigation services. 

SNFR236: NGI shall return an incorrect candidate a maximum of 20% of the time, as a result of facial recognition search in support of photo 
investigation services. 

SNFR237: NGI shall return the correct candidate a minimum of 98% of the time, when it exists in the searched repository, as a result of a iris search 
in support of iris investigation services. 

SNFR238: NGI shall return an incorrect candidate a maximum of 10% of the time, as a result of an iris search in support of iris investigation 
services. 

SNFR239: NGI shall return the correct candidate a minimum of 75% of the time, when it exists in the ULF, as a result of a cascaded fingerprint 

■x 

search of the ULF. 

SNFR240: NGI shall return the correct candidate a minimum of 75% of the time, when it exists in the UPF, as a result of a cascaded facial recognition 
search of the UPF. 
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SNFR241 : NGI shall return the correct candidate a minimum of 75% of the time, when it exists in the UIF, as a result of a cascaded iris search of the 
UIF. 

SNFR242: NGI shall return the correct candidate a minimum of 95% of the time, when it exists in the SPC File, as a result of a cascaded fingerprint 
search of an SPC File. 

SNFR243: NGI shall return the correct candidate a minimum of 95% of the time, when it exists in the SPC File, as a result of a cascaded facial 
recognition search of an SPC File. 

SNFR244: NGI shall respond to 99% of RISC Rapid Searches received during any continuous 24-hour period within 20 seconds after receipt by NGI 
when additional Identity information is requested. 

STRQ19: IAFIS shall improve overall search request processing time by automating search technology and removing or reducing the need for 
human examiners when it comes to fingerprint comparisons. 

STRQ59: The system shall provide a response without criminal history to an inquiry from a traffic stop within 1 5 minutes. 

SNFR245: NGI shall respond to a high priority Fingerprint Investigation Search within 30 seconds after receipt by NGI. 


BIO.FEAT53: The solution shall make available for display biometrically-Iinked information on a known individual to a POE officer at Primary. This 
information shall include: a. Digital facial photograph associated with document presented b. Currently captured minimum biographic information - 
First Name, Last Name, Date of Birth, Gender, Associated Identity Document Number, Document Issuing Authority, Document Type c. Any existing 
information currently displayed for an officer at Primary, including IDENT watchlist information d. An indication of criminal history 
BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

SNFR246: NGI shall respond to a routine priority Fingerprint Investigation Search within two minutes after receipt by NGI. 


BIO.FEAT53: The solution shall make available for display biometrically-Iinked information on a known individual to a POE officer at Primary. This 
information shall include: a. Digital facial photograph associated with document presented b. Currently captured minimum biographic information - 
First Name, Last Name, Date of Birth, Gender, Associated Identity Document Number, Document Issuing Authority, Document Type c. Any existing 
information currently displayed for an officer at Primary, including IDENT watchlist information d. An indication of criminal history 

SNFR248: NGI shall perform a fingerprint maintenance request within 15 minutes after receipt by NGI. 

SNFR249: NGI shall send an External Photo Image Retrieval request to an External System within 15 minutes of NGI receiving the request. 

SNFR250: NGI shall complete a cascaded Facial Recognition Search within 24 hours of NGI completing the original request. 

SNFR251: Deleted. 


SNFR253: 

SNFR254: 

SNFR255: 

SNFR256: 

SNFR257: 

SNFR258: 


SNFR259: 


NGI shall complete a cascaded Supplemental Fingerprint and Paimprint Search within 24 hours of NGI completing the original request. 
NGI shall respond to an EBTS Disposition Submission request within 24 hours after the receipt by NGI. 

NGI shall respond to an EBTS Disposition Maintenance request within 24 hours after the receipt by NGI. 

NGI shall complete a cascaded Paimprint Search within 24 hours of NGI completing the original request. 

NGI shall respond to a low priority Fingerprint Investigation Search within 30 minutes after receipt by NGI. 

NGI shall correctly verify the candidate at TAR=99.25% for a single finger comparison. 

BIO.FEAT1 78: The solution shall match captured prints to stored prints of the same individual for verification, with a True Accept Rate of greater 
than 99 percent and a False Accept Rate of less than .1 percent. 

STRQ654: The latent system shall provide accuracy as to variation from flat latents to rolled. 

NGI shall comply with the latest version of the CJIS Controlled Access Protection Profile (CAPP). 
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BIO.FEAT394: The solution shall implement data control mechanisms for the IDR within each respective system to ensure a requestor is an 
authorized user. 

LEG.NFR1: IAFIS shall comply with all applicable federal and agency guidelines and requirements that relate to the development and operation of 
LEG.NFR18: IAFIS shall ensure that all arriving messages from external IAFIS systems request only those functions and data authorized to the 
originator of the message. 

LEG.NFR19: IAFIS shall require all remote messages from users, not authenticated directly by IAFIS, to be inspected by a message access control 
function. 

LEG.NFR30: IAFIS shall provide hardware features for use to periodically validate the correct operation of the on-site hardware and firmware 
elements. 

LEG.NFR31 : IAFIS shall provide software features for use to periodically validate the correct operation of the on-site hardware and firmware 
elements. 

LEG.NFR32: IAFIS shall ensure that all application software executing in the operational environment is free of any debug or system interrupt 
functions used to test or develop the software. 

LEG.NFR93: IAFIS shall require that every received message is uniquely identified and logged as to date and time of receipt. 

SNFR260: Deleted. 

SNFR261: Deleted. 

SNFR262: NGI shall support a fingerprint feature set solution that is publicly available. 

SNFR263: NGI shall comply with Section 508 of the Rehabilitation Act (29 USC 794d) for all system components, including but not limited to 
developed software, COTS and hardware. 

LEG.NFR1: IAFIS shall comply with all applicable federal and agency guidelines and requirements that relate to the development and operation of 
IAFIS. 

SNFR264: NGI shall return the correct candidate a minimum of 95% of the time, when it exists in the SPC File, as a result of a cascaded iris search of 
an SPC File. 

SNFR265: NGI shall be capable of meeting the estimated average daily fingerprint workloads contained in Table 4-1b. 

LEG.NFR74: IAFIS shall provide the capability to meet all workload projections as described in the IAFIS System Requirements Document. 

LEG.NFR75: IAFIS shall be capable of meeting the average daily submission volume for Tenprint processing as specified in the third row of Table 4- 
1A and the first row of Table 4-1B. 

LEG.NFR76: IAFIS shall be capable of meeting the average daily volumes of Tenprint submissions requiring features-based processing as specified 
in the fifth row of Table 4-1 A and the third row of Table 4-1 B. 

LEG.NFR87: IAFIS shall be capable of meeting the average daily workload of submissions and requests as specified in Table 4-7. 

LEG.NFR89: IAFIS shall be capable of meeting the average daily workload of Fingerprint Image Requests as specified in Table 4-7. 

STRQ271 : IAFIS shall increase the latent file cap to an initial size of 1 million images. 

STRQ744: I AFIS shall determine valid projections of work load with an ability to scale up or surge as contingencies arise. 

STRQ772: IAFIS shall have database scalability to deal with contingency surges of up to 400,000 searches per day. 

STRQ787: IAFIS shall maintain a spare capacity so IAFIS can search 5% of the database against itself every 20 months - automated consolidated 
run (i.e. a 100% over 20 month timeframe). 

STRQ804: The IAFIS system shall be scalable. 

STRQ898: IAFIS shall be scalable to increase the base search of 200,000 records. 

STRQ1080: IAFIS shall be able to support increased peak rates. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 
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STRQ1 081 : IAFIS shall be able to support increased daily workloads. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1083: IAFIS shall have sufficient capacity to handle high volume, high priority short term events. 

SNFR266: NGI shall be capable of meeting the estimated average hourly fingerprint workloads contained in Table 4-1c. 

LEG.NFR74: IAFIS shall provide the capability to meet all workload projections as described in the IAFIS System Requirements Document. 
LEG.NFR75: IAFIS shall be capable of meeting the average daily submission volume for Tenprint processing as specified in the third row of Table 4- 
1 A and the first row of Table 4-1 B. 

LEG.NFR76: IAFIS shall be capable of meeting the average daily volumes of Tenprint submissions requiring features-based processing as specified 
in the fifth row of Table 4-1 A and the third row of Table 4-1 B. 

LEG.NFR87: IAFIS shall be capable of meeting the average daily workload of submissions and requests as specified in Table 4-7. 

LEG.NFR89: IAFIS shall be capable of meeting the average daily workload of Fingerprint Image Requests as specified in Table 4-7. 

STRQ271 : IAFIS shall increase the latent file cap to an initial size of 1 million images. 

STRQ744: IAFIS shall determine valid projections of work load with an ability to scale up or surge as contingencies arise. 

STRQ772: IAFIS shall have database scalability to deal with contingency surges of up to 400,000 searches per day. 

STRQ787: IAFIS shall maintain a spare capacity so IAFIS can search 5% of the database against itself every 20 months - automated consolidated 
run (i.e. a 100% over 20 month timeframe). 

STRQ804: The IAFIS system shall be scalable. 

STRQ898: IAFIS shall be scalable to increase the base search of 200,000 records. 

STRQ1 080: IAFIS shall be able to support increased peak rates. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1 081 : IAFIS shall be able to support increased daily workloads. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1 083: IAFIS shall have sufficient capacity to handle high volume, high priority short term events. 

SNFR267: NGI shall be capable of meeting the estimated peak hourly fingerprint workloads contained in Table 4-1d. 

LEG.NFR74: IAFIS shall provide the capability to meet all workload projections as described in the IAFIS System Requirements Document. 
LEG.NFR75: IAFIS shall be capable of meeting the average daily submission volume for Tenprint processing as specified in the third row of Table 4- 

1 A and the first row of Table 4-1 B. 

LEG.NFR76: IAFIS shall be capable of meeting the average daily volumes of Tenprint submissions requiring features-based processing as specified 
in the fifth row of Table 4-1 A and the third row of Table 4-1 B. 

LEG.NFR87: IAFIS shall be capable of meeting the average daily workload of submissions and requests as specified in Table 4-7. 

LEG.NFR89: IAFIS shall be capable of meeting the average daily workload of Fingerprint Image Requests as specified in Table 4-7. 

STRQ271 : IAFIS shall increase the latent file cap to an initial size of 1 million images. 

STRQ744: IAFIS shall determine valid projections of work load with an ability to scale up or surge as contingencies arise. 

STRQ772: IAFIS shall have database scalability to deal with contingency surges of up to 400,000 searches per day. 

STRQ787: IAFIS shall maintain a spare capacity so IAFIS can search 5% of the database against itself every 20 months - automated consolidated 
run (i.e. a 100% over 20 month timeframe). 

STRQ804: The IAFIS system shall be scalable. 

STRQ898: IAFIS shall be scalable to increase the base search of 200,000 records. 

STRQ1080: IAFIS shall be able to support increased peak rates. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 
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STRQ1081 : IAFIS shall be able to support increased daily workloads. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1083: IAFIS shall have sufficient capacity to handle high volume, high priority short term events. 

SNFR268: NGI shall be capable of meeting the estimated average Daily Latent workloads contained in Table 4-3b. 

LEG.NFR80: IAFIS Latent Fingerprint processing shall be capable of meeting the average daily submission volumes as specified in the first, second 
and third row of Table 4-4A. 

LEG.NFR81 : IAFIS shall be capable of meeting the average daily Latent Fingerprint submission and search volumes for Latent Fingerprint 
submissions as specified in the last row of Table 4-4A. 

STRQ271 : IAFIS shall increase the latent file cap to an initial size of 1 million images. 

STRQ744: IAFIS shall determine valid projections of work load with an ability to scale up or surge as contingencies arise. 

STRQ772: IAFIS shall have database scalability to deal with contingency surges of up to 400,000 searches per day. 

STRQ787: IAFIS shall maintain a spare capacity so IAFIS can search 5% of the database against itself every 20 months - automated consolidated 
run (i.e. a 100% over 20 month timeframe). 

STRQ804: The IAFIS system shall be scalable. 

STRQ898: IAFIS shall be scalable to increase the base search of 200,000 records. 

v 

STRQ1 080: IAFIS shall be able to support increased peak rates. 

STRQ1 079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1081 : IAFIS shall be able to support increased daily workloads. 

STRQ1 079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1083: IAFIS shall have sufficient capacity to handle high volume, high priority short term events. 

SNFR269: NGI shall be capable of meeting the estimated average Hourly Latent workloads contained in Table 4-3c. 

LEG.NFR80: IAFIS Latent Fingerprint processing shall be capable of meeting the average daily submission volumes as specified in the first, second 
and third row of Table 4-4A. 

LEG.NFR81 : IAFIS shall be capable of meeting the average daily Latent Fingerprint submission and search volumes for Latent Fingerprint 
submissions as specified in the last row of Table 4-4A. 

SYRQ271 : IAFIS shall increase the latent file cap to an initial size of 1 million images. 

STRQ744: IAFIS shall determine valid projections of work load with an ability to scale up or surge as contingencies arise. 

STRQ772: IAFIS shall have database scalability to deal with contingency surges of up to 400,000 searches per day. 

STRQ787: IAFIS shall maintain a spare capacity so IAFIS can search 5% of the database against itself every 20 months - automated consolidated 
run (i.e. a 1 00% over 20 month timeframe). 

STRQ804: The IAFIS system shall be scalable. 

STRQ898: IAFIS shall be scalable to increase the base search of 200,000 records. 

STRQ1080: IAFIS shall be able to support increased peak rates. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1081 : IAFIS shall be able to support increased daily workloads. 

STRQ1079: IAFIS shall be able to support increased peak rates in addition to increase daily workloads. 

STRQ1083: IAFIS shall have sufficient capacity to handle high volume, high priority short term events. 

SNFR270: Deleted. 

SNFR271: NGI shall be capable of meeting the projected yearly Special Population Cognizant File capacity as specified in Table 4-4b. 
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LEG.NFR82: IAFIS shall provide the capacity to store fingerprint features data in the Latent Cognizant Features file for 100% of the subjects in the 
Criminal Tenprint Fingerprint Features Master file. 

LEG.NFR84: IAFIS shall provide the capacity to store fingerprint data in the Special Latent Cognizant Image Files and Special Latent Cognizant 
Features Files for the total number of subjects as specified in row 7 of Table 4-2. 

SNFR272: NGI shall be capable of meeting the estimated average daily disposition workloads contained in Table 4-5b. 

SNFR273: NGI shall support 150% of average hourly disposition workload as the disposition peak hourly workload. 

SNFR274: NGI shall be capable of meeting the estimated average hourly disposition workloads contained in Table 4-5c. 

SNFR275: NGI shall support 150% of average hourly photo workload as the photo peak hourly workload. 

LEG.NFR88: IAFIS shall be capable of meeting the average daily workload of photo image requests and submissions as specified in Table 4-7. 
SNFR276: NGI shall be capable of meeting the estimated average daily photo workloads contained in Table 4-7b. 

LEG.NFR88: IAFIS shall be capable of meeting the average daily workload of photo image requests and submissions as specified in Table 4-7. 
SNFR277: NGI shall be capable of meeting the estimated average hourly photo workloads contained in Table 4-7c. 

LEG.NFR88: IAFIS shall be capable of meeting the average daily workload of photo image requests and submissions as specified in Table 4-7. 
SNFR278: NGI shall be capable of meeting the estimated average daily palmprint workloads contained in Table 4-9b. 

SNFR279: NGI shall be capable of meeting the estimated average hourly palmprint workloads contained in Table 4-9c. 

SNFR280: NGI shall support 150% of average hourly palmprint workload as the palmprint peak hourly workload. 

SNFR281 : NGI shall be capable of meeting the estimated average daily supplemental fingerprint and palmprint workloads contained in Table 4-1 1 b. 

SNFR282: NGI shall be capable of meeting the estimated average hourly supplemental fingerprint and palmprint workloads contained in Table 4-1 1c. 
SNFR283: NGI shall support 150% of average hourly supplemental fingerprint and palmprint workload as the supplemental fingerprint palmprint 
peak hourly workload. 

SNFR284: NGI shall be capable of meeting the estimated average daily iris workloads contained in Table 4-1 3b. 

SNFR285: NGI shall be capable of meeting the estimated average hourly iris workloads contained in Table 4-13c. 

SNFR286: NGI shall support 150% of average hourly iris workload as the iris peak hourly workload. 

• SNFR287: NGI shall be capable of meeting the estimated average daily Rap Back workloads contained in Table 4-17b. 

SNFR288: NGI shall be capable of meeting the estimated average hourly Rap Back workloads contained in Table 4-17c. 

• SNFR289: NGI shall complete a cascaded Iris Search within 24 hours of NGI completing the original request. 

SNFR290: NGI shall comply with the current CJIS Data Center and Facility Management policies when defining the environment in which NGI is 
located. 

LEG.NFR97: IAFIS shall adhere to the current CJIS Data Center and Facility Management policies when defining the environment in which IAFIS is 
located. 

SNFR291: NGI shall provide 99% availability, per month, in support of all Shared Data capabilities. 

BIO.FEAT109: The solution shall remain in operation 99% of the time. 

LEG.NFR98: IAFIS shall be available for shared data access by IDENT a minimum of 99% measured over a one month period. 

SNFR292: NGI shall respond to a criminal Tenprint Fingerprint identification Search of the Shared Data records within two hours after receipt. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

LEG.NFR99: IAFIS shall respond to a criminal Tenprint Fingerprint Identification Search of the IDENT shared data records within two hours after 

receipt by iDSM. 
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SNFR293: NGI shall respond to a civil Tenprint Fingerprint Identification Search of the Shared Data records within twenty four hours after receipt by 
NGI. 

BIO.FEAT322: The solution shall accommodate the Transaction-Volume spreadsheet version 5.0 dated April 16, 2009. 

LEG.NFR100: IAFIS shall respond to a civil Tenprint Fingerprint Identification Search of the IDENT shared data records within twenty four hours 
after receipt by iDSM. 

SNFR294: NGI shall provide a response to a Shared Data search within the required time allotment 95% of the time measured over a month for the 

end-user, not including the LESC response time. 

BIO.FEAT102: The solution shall provide the ability to report on the response time for biometric queries. 

BIO.FEAT274: Upon data removal by the owning agency for records retention policy purposes, the solution shall remove that data from in-scope 
systems within 24 hours. 

LEG.NFR101: IAFIS shall provide a response to a shared data search within the required time allotment 95% of the time measured over a month for 
the end-user, not including the LESC response time. . 

SNFR295: NGI shall provide the results of the Shared Data post processing (QA) on all positive identifications against the Shared Data records 
within 24 hours. 

BIO.FEAT106: The solution shall provide agency-to-agency audit trails for data receipt, maintenance, storage, dissemination, and use of shared 
data. 

BIO.FEAT107: The solution shall provide an audit trail of all data capture and update transactions. 

BIO.FEAT108: The solution shall provide the ability to perform ad-hoc reports on all available data for a particular user. 

LEG.NFR102: IAFIS shall provide the results of the shared data post processing (QA) on all positive identifications against the IDENT shared data 
records within 24 hours. 

SNFR296: NGI shall enroll NGI Shared Data at least once a day. 

BIO.FEAT106: The solution shall provide agency-to-agency audit trails for data receipt, maintenance, storage, dissemination, and use of shared 
data. 

BIO.FEAT107: The solution shall provide an audit trail of all data capture and update transactions. 

LEG.NFR103: IAFIS shall enroll IAFIS shared data at least once a day. 

SNFR297: NGI shall accept Shared Data enrollment requests from an External System (e.g., IDENT) at least once a day. 

BIO.FEAT106: The solution shall provide agency-to-agency audit trails for data receipt, maintenance, storage, dissemination, and use of shared 
data. 

BIO.FEAT107: The solution shall provide an audit trail of all data capture and update transactions. 

LEG.NFR104: IAFIS shall accept shared data enrollment requests from IDENT at least once a day. 

SNFR298: NGI shall be capable of processing 1,000 Shared Data demotions from NGI per day. 

BIO.FEAT185: The solution shall adhere to the data retention policies of the data owner. 

BIO.FEAT276: When CJIS posts a demote for a record, the solution shall remove the want flag in US-VISIT. 

BIO.FEAT277: The solution shall enable authorized personnel to demote an individual from the watchlist. 

BIO.FEAT278: The solution shall notify US-VISIT analysts if the want flag is removed for an individual being demoted. 

BIO.FEAT310: In the event a want and warrant is no longer active on an individual, the solution shall notify IDENT to demote the active want and 
warrant flag from the individual’s record. 

LEG.NFR105: IAFIS shall be capable of processing 1,000 IAFIS shared data demotions per day. 

SNFR299: NGI shall be capable of processing 1,000 Shared Data removals from NGI per day. 


NGI-DOC-01 175-4.0, May 10, 2007 




BIO.FEAT274: Upon data removal by the owning agency for records retention policy purposes, the solution shall remove that data from in-scope 
systems within 24 hours. 

BIO.FEAT275: When CJIS executes a removal for an individual, US-VISIT shall unlink the FBI criminal history and all references to that criminal 
history from any DHS encounters for that individual. 

LEG.NFR106: IAFIS shall be capable of processing 1 ,000 IAFIS shared data removals per day. 

SNFR300: NGI shall be capable of processing 2,500 Shared Data enrollments from NGI per day. 

BIO.FEAT195: The solution shall have the ability to match flat prints with rolled prints stored in in-scope systems. 

BIO.FEAT197: The solution shall have the ability to match rolled prints with flat prints stored in in-scope systems. 

LEG.NFR107: IAFIS shall be capable of processing 2,500 IAFIS shared data enrollments per day. 

SNFR301 : NGI shall be capable of extracting feature vectors from an External System’s (e.g., IDENT) Shared Data at a rate of 25 per day. 

LEG.NFR108: IAFIS shall be capable of extracting feature vectors from IDENT shared data at a rate of 25 per day. 

SNFR302: NGI shall be capable of supporting updates to an External System’s (e.g., IDENT) Shared Data at a rate of 200 changes per day. 

BIO.FEAT65: The solution shall provide the ability for the data owning agency to electronically update biographic information. 

BIO.FEAT69: The solution shall always associate any updated information (biometrics, biographies, source of biographical information, individual’s 
role, criminal history, civil background history) to the enumerator, FNU, and/or CRN of that individual. 

BIO.FEAT70: The solution shall provide all updates to shared biographic information between in-scope systems within 15 minutes. 

BIO.FEAT141: The solution shall provide authorized users real-time access to all information entered or updated in the system based on user 
permissions. 

BIO.FEAT273: The solution shall always associate any updated information (biometrics, biographies, source of biographical information, criminal 
history) to the enumerator and/or FNU of that individual. 

BIO.FEAT304: The solution shall update retained records automatically when subject information is added. 

BIO.FEAT305: The solution shall update retained records automatically when subject information is updated. 

BIO.FEAT306: The solution shall update retained records automatically when subject information is deleted. 

LEG.NFR109: IAFIS shall be capable of supporting updates.to the IDENT shared data at a rate of 200 changes per day. 

SNFR303: NGI shall support a configurable number of IAQ searches per day. 

BIO.FEAT249: When either IDENT or IAFIS stores biometrics that have a biometrically-verified link to information stored within an external system 
or agency (such as CLAIMS and SEVIS through LESC, DOS CLASS, DOD, and NFF state systems ) that interfaces with either IDENT or IAFIS, the 
solution shall provide access to that information. 

LEG.NFR1 10: IAFIS shall support a configurable number of IAQ searches per day. 

SNFR304: NGI shall be capable of conducting up to 1,000 NGI Tenprint Identification searches per day against Shared Data records. 

LEG.NFR1 1 1 : IAFIS shall be capable of conducting up to 1 ,000 IAFIS Tenprint Identification searches per day against the IDENT shared data 
records. 

SNFR305: NGI shall be capable of performing 1,000 fingerprint feature searches of NGI Tenprint submissions against Shared Data records feature 
vectors per day. 

LEG.NFR1 1 2: IAFIS shall be capable of performing 1 ,000 manual image comparisons of IAFIS Tenprint submissions against the IDENT shared 
data records per day. 

SNFR306: NGI shall have the storage capacity for 1,000,000 Shared Data records from NGI. 

LEG.NFR1 13: IAFIS shall have the storage capacity for 1 ,000,000 shared data records from IAFIS. 

SNFR307: NGI shall have the storage capacity for 13 million NGI Shared Data Activity Log entries over five years. 

LEG.NFR1 14: IAFIS shall have the storage capacity for 1 3 million IAFIS shared data Activity Log entries over five years. 
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SNFR308: NGI shall have the storage capacity for 1,000,000 Shared Data records from an External System (e.g., IDENT). 

LEG.NFR115: IAFIS shall have the storage capacity for 1,000,000 shared data records from IDENT. 

SNFR309: NGI Systems Security Functions [the TOE Security Functions (TSF)] shall use NIST FIPS 140-2 validated cryptography (methods and 
implementations) for key management (i.e.; generation, access, distribution, destruction, handling, and storage of keys) and cryptographic services 
(i.e.; encryption, decryption, signature, hashing, key exchange, and random number generation services). 

SNFR310: NGI Security Functions shall provide cryptographic integrity mechanisms for TSF data while in transit to remote parts of the TOE. 
SNFR311: NGI shall support the marking of output using standard naming conventions to identify any special dissemination, handling, or 

distribution instructions. 

SNFR312: NGI information shall be appropriately labeled in storage, after processing, and after transmission in accordance with organizational 
policy and procedures. 

SNFR313: NGI shall maintain all security labeling until changed by the appropriate personnel as determined by the data owner and all such changes 
are subject to audit. 

SNFR314: NGI system configuration documentation shall explicitly define the security functions. 

SNFR315: NGI access enforcement shall be consistently applied across the information system on an ongoing basis; any anomalies or problems 
encountered during access enforcement are being logged. 

SNFR316: NGI separation of duties concepts shall be applied in accordance with organizational policy and procedures. 

SNFR317: An assessment of the NGI security controls shall be performed to determine the extent to which controls are implemented correctly. 
SNFR318: An assessment of the NGI security controls shall be performed to determine the extent to which the controls are producing the desired 

outcome with respect to meeting the security requirements for the system. 

SNFR319: NGI TSF shall provide authorized administrators with the necessary information for secure management. 

LEG.NFR23: IAFIS shall provide the capability for a System Security Administrator to disable a terminal, workstation, or access port from a central 

location. 

SNFR320: NGI TSF shall provide authorized users with the necessary guidance for secure operations. 

SNFR321: NGI shall comply with organizational usage restrictions and implementation guidance for mobile code technologies based on the 

potential to cause damage to the information system if used maliciously. 

LEG.NFR38: IAFIS shall prevent malicious code from entering the IAFIS environment (e.g., automated baseline tools, or virus detection tools). 
SNFR322: NGI shall document the use of mobile code within the information system. 

SNFR323: NGI shall verify media sanitization actions. 

SNFR324: NGI shall periodically test sanitization equipment/procedures to ensure correct performance. 

SNFR325: NGI shall comply with personnel security policy that addresses purpose, scope, roles, responsibilities, and compliance with Department 
policy regarding minimum investigative requirements. 

SNFR326: NGI shall design and implement the information system using security engineering principles. 

LEG.NFR29: IAFIS shall ensure that information is protected from improper disclosure and that the services and resources composing IAFIS are 
impenetrable to unauthorized individuals. 

SNFR327: NGI shall enforce access restrictions associated with changes to the information system. 

SNFR328: NGI shall test and/or exercise the contingency plan for NGI using Department approved tests and exercises to determine the plan’s 
effectiveness and the component’s readiness to execute the plan. 

SNFR329: NGI shall develop and implement a contingency plan for the information system addressing contingency roles, responsibilities, and 
activities associated with restoring the system after a disruption or failure. 
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